Google Cloud is making it easier for developers to smuggle ‘secrets’ in their code
Google Cloud wants to make building secure applications simpler
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
GoogleCloud has announced a new integration that will help developers ensure sensitive data is not exposed in application code.
The company has melded its Secret Manager service, which provides a secure method of storing API keys, passwords and other private information, with its Cloud CodeIDEextensions, designed to accelerate the development of cloud-based applications.
The integration allows developers to replace hardcoded data with so-called Secrets, a type of global object available to applications at build or runtime. This way, cloud applications can make use of the sensitive data when needed, but without leaving it exposed in the codebase.
Google Cloud Secret Manager
According to Google, the new integration will make it easier for developers to build secure applications, while also avoiding the complexities of securing sensitive data via alternative methods.
“Hardcoding sensitive configuration data, like database passwords and API keys, into strings is usually not a good idea for your codebase,” explained Abby Carey, Developer Advocate at Google Cloud.
“Today, many applications require credentials to connect to a database, API keys to invoke a service or certificates for authentication. Managing and securing access to these requests is often more complicated by secret sprawl, poor visibility or lock of integrations.”
By integrating Cloud Code and Secret Manager, Google Cloud hopes to address these common developer pain points, balancing both security and convenience.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
The new functionality is now live for Cloud Code plugins, which are available for a range of different JetBrains IDEs, VS Code and Cloud Shell Editor.
Joel Khalili is the News and Features Editor at TechRadar Pro, covering cybersecurity, data privacy, cloud, AI, blockchain, internet infrastructure, 5G, data storage and computing. He’s responsible for curating our news content, as well as commissioning and producing features on the technologies that are transforming the way the world does business.
iStorage Group acquires Kanguru Solutions as it looks to expand security offering
Phishing attacks surge in 2024 as cybercriminals adopt AI tools and multi-channel tactics
Arcane season 2 finally gave us the huge Caitlyn and Vi moment we’ve been waiting for – and its creators say ‘we couldn’t have done it in season one’
